SecurityServer/acl_keychain.h

   1 /*
   2  * Copyright (c) 2000-2001 Apple Computer, Inc. All Rights Reserved.
   3  *
   4  * The contents of this file constitute Original Code as defined in and are
   5  * subject to the Apple Public Source License Version 1.2 (the 'License').
   6  * You may not use this file except in compliance with the License. Please obtain
   7  * a copy of the License at http://www.apple.com/publicsource and read it before
   8  * using this file.
   9  *
  10  * This Original Code and all software distributed under the License are
  11  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
  12  * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
  13  * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
  14  * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
  15  * specific language governing rights and limitations under the License.
  16  */
  17
  18
  19 //
  20 // acl_keychain - a subject type for the protected-path
  21 //              keychain prompt interaction model.
  22 //
  23 #ifndef _ACL_KEYCHAIN
  24 #define _ACL_KEYCHAIN
  25
  26 #include <Security/cssmacl.h>
  27 #include "SecurityAgentClient.h"
  28 #include <string>
  29
  30
  31 //
  32 // This is the actual subject implementation class
  33 //
  34 class KeychainPromptAclSubject : public SimpleAclSubject {
  35         static const Version pumaVersion = 0;   // 10.0, 10.1 -> default selector (not stored)
  36         static const Version jaguarVersion = 1; // 10.2 et al -> first version selector
  37 public:
  38     bool validate(const AclValidationContext &baseCtx, const TypedList &sample) const;
  39     CssmList toList(CssmAllocator &alloc) const;
  40
  41     KeychainPromptAclSubject(string description, const CSSM_ACL_KEYCHAIN_PROMPT_SELECTOR &selector);
  42
  43     void exportBlob(Writer::Counter &pub, Writer::Counter &priv);
  44     void exportBlob(Writer &pub, Writer &priv);
  45
  46         IFDUMP(void debugDump() const);
  47
  48     class Maker : public AclSubject::Maker {
  49     public:
  50         Maker(CSSM_ACL_SUBJECT_TYPE type = CSSM_ACL_SUBJECT_TYPE_KEYCHAIN_PROMPT)
  51                         : AclSubject::Maker(type) { }
  52         KeychainPromptAclSubject *make(const TypedList &list) const;
  53         KeychainPromptAclSubject *make(Version version, Reader &pub, Reader &priv) const;
  54     };
  55
  56 private:
  57         CSSM_ACL_KEYCHAIN_PROMPT_SELECTOR selector; // selector structure
  58     string description;                         // description blob (string)
  59
  60 private:
  61         static CSSM_ACL_KEYCHAIN_PROMPT_SELECTOR defaultSelector;
  62
  63         typedef uint32 VersionMarker;
  64         static const VersionMarker currentVersion = 0x3BD5910D;
  65
  66         bool isLegacyCompatible() const;
  67 };
  68
  69
  70 #endif //_ACL_KEYCHAIN